$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/240a302b-f711-30f9-b1bb-ac2ba0d5124d.roa File: 240a302b-f711-30f9-b1bb-ac2ba0d5124d.roa (raw, json) Hash identifier: bbst0QSdGh/e2ertwN+Bh73adVnPw+W7Vf5xDkktCMU= Subject key identifier: 73:12:E1:0A:A6:0F:50:B0:27:8E:42:56:FC:58:2A:14:E7:11:D0:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A3A159D0F881162D0BE765480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/240a302b-f711-30f9-b1bb-ac2ba0d5124d.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 20940 IP address blocks: 23.217.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:9d:0f:88:11:62:d0:be:76:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=1545288e-b064-48d0-be16-27997c5ddd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:f3:68:5a:e8:14:83:4a:ff:17:91:9d:e9: b2:6e:75:97:8c:91:57:e6:be:db:d0:90:33:c2:04: 9e:a3:98:a9:97:60:98:ef:25:4f:d7:5f:77:5f:3e: b3:39:80:b3:9a:ab:63:20:4b:e6:7e:c5:e5:be:b4: 83:d1:0b:09:c8:17:1a:aa:2e:8a:b9:3a:50:7f:3a: 24:9b:9b:aa:ce:d3:1c:21:ce:ab:29:d4:6c:fd:73: 0c:b3:5a:6b:02:bb:75:40:ba:b2:f0:8a:38:60:29: 8c:75:ef:82:e1:e1:3c:ac:63:07:3d:31:44:26:16: f9:17:b7:4f:4e:06:42:45:4d:de:4f:49:34:66:ee: ce:fb:e1:b7:a7:ce:c4:90:d6:a6:2e:d6:3a:ae:9e: e8:57:af:36:43:25:9e:c6:f7:db:3a:09:71:75:5e: 54:16:62:91:9e:36:d2:16:43:9a:91:ba:1f:0f:11: d5:f7:70:c4:9d:a4:01:73:97:2d:e6:d0:b0:23:35: c4:88:93:81:84:3f:96:00:64:7b:a5:d9:87:6b:2c: 51:51:87:fc:fe:ed:04:5a:c1:f3:a9:1a:af:eb:6d: 05:90:93:a6:1a:3b:92:70:db:e9:a3:4f:9f:4d:76: ac:94:b9:87:df:c9:2e:1b:eb:d9:82:17:cb:53:6e: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:12:E1:0A:A6:0F:50:B0:27:8E:42:56:FC:58:2A:14:E7:11:D0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/240a302b-f711-30f9-b1bb-ac2ba0d5124d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:26:8c:1d:5f:67:0c:27:d3:94:92:ec:9c:5a:45:53:20:99: 7f:53:dd:8b:3d:49:99:e6:b3:a1:63:9d:6a:50:64:d9:b5:15: 1b:40:c2:ee:6f:a4:6e:4c:a9:2e:42:7e:2a:29:c7:b7:60:25: 0c:69:1a:40:6f:b7:6d:98:c6:7c:e9:8a:6b:51:ab:08:b2:27: 4b:29:cc:0f:b7:25:21:3a:24:38:c6:68:e8:f4:56:03:b5:46: e9:9d:e5:7b:d7:24:39:e9:b2:6a:f7:1c:cd:44:de:6e:08:dc: 02:42:66:b1:6e:e4:10:21:4b:20:29:f8:28:0f:d7:90:0e:4d: 64:3d:19:ba:ec:d3:20:02:c3:ea:be:d1:15:9b:cd:a5:5c:28: 12:6b:88:6d:f6:06:eb:24:8b:76:b4:9f:d3:e2:8c:9d:3c:37: e5:3b:93:d5:f1:0d:59:c6:a5:b9:7e:ee:5e:9f:1d:6f:7a:f3: 23:e3:69:ff:cf:7c:c6:46:dd:50:93:2a:dc:72:a6:32:84:b4: 85:43:a2:30:4a:cf:ac:03:2d:5d:8e:8a:a7:25:f1:5a:a1:54: 7a:8e:b1:6a:85:d5:8a:89:96:0c:22:4c:50:cd:89:77:9d:d5: 35:5c:9b:15:e3:5d:11:46:d7:d1:3e:2f:fa:35:10:c8:a3:3c: 10:62:59:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FZ0PiBFi0L52VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk MTU0NTI4OGUtYjA2NC00OGQwLWJlMTYtMjc5OTdjNWRkZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPjzaFroFINK/xeRnemybnWXjJFX5r7b0JAz wgSeo5ipl2CY7yVP1193Xz6zOYCzmqtjIEvmfsXlvrSD0QsJyBcaqi6KuTpQfzok m5uqztMcIc6rKdRs/XMMs1prArt1QLqy8Io4YCmMde+C4eE8rGMHPTFEJhb5F7dP TgZCRU3eT0k0Zu7O++G3p87EkNamLtY6rp7oV682QyWexvfbOglxdV5UFmKRnjbS FkOakbofDxHV93DEnaQBc5ct5tCwIzXEiJOBhD+WAGR7pdmHayxRUYf8/u0EWsHz qRqv620FkJOmGjuScNvpo0+fTXaslLmH38kuG+vZghfLU25xiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMS4QqmD1CwJ45CVvxYKhTnEdC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQwYTMwMmItZjcxMS0z MGY5LWIxYmItYWMyYmEwZDUxMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHImjB1fZwwn05SS7JxaRVMgmX9T3Ys9SZnms6FjnWpQZNm1FRtAwu5v pG5MqS5Cfiopx7dgJQxpGkBvt22YxnzpimtRqwiyJ0spzA+3JSE6JDjGaOj0VgO1 Rumd5XvXJDnpsmr3HM1E3m4I3AJCZrFu5BAhSyAp+CgP15AOTWQ9Gbrs0yACw+q+ 0RWbzaVcKBJriG32Buski3a0n9PijJ08N+U7k9XxDVnGpbl+7l6fHW968yPjaf/P fMZG3VCTKtxypjKEtIVDojBKz6wDLV2Oiqcl8VqhVHqOsWqF1YqJlgwiTFDNiXed 1TVcmxXjXRFG19E+L/o1EMijPBBiWb0= -----END CERTIFICATE-----Generated at Sun Jun 29 13:58:58 2025 by rpki-client